Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2020-9081

There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Success

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
huawei

Description

There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Huawei HUAWEI Mate 20

Default version status: unaffected

  • Versions earlier than 10.1.0.160(C00E160R3P8)affected
  • Versions earlier than 10.1.0.160(C01E160R2P8)affected

Huawei HUAWEI P30

Default version status: unaffected

  • Versions earlier than 10.1.0.160(C00E160R2P11)affected

Huawei HUAWEI P30 Pro

Default version status: unaffected

  • Versions earlier than 10.1.0.160(C00E160R2P8)affected
  • Versions earlier than 10.1.0.160(C01E160R2P8)affected

Huawei Princeton-AL10D

Default version status: unaffected

  • Versions earlier than 10.1.0.160(C00E160R2P11)affected

Huawei Yale-AL00A

Default version status: unaffected

  • Versions earlier than 10.1.0.160(C00E160R8P12)affected

Huawei Yale-AL50A

Default version status: unaffected

  • Versions earlier than 10.1.0.88(C00E88R8P1)affected

Huawei YaleP-AL10B

Default version status: unaffected

  • Versions earlier than 10.1.0.160(C00E160R8P12)affected

References